Privacy Policy

Last updated: 5 October 2026

This notice describes how the personal data of users visiting the website gruppoloma.com (the “Site”) are processed, pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 (“GDPR”) and Italian data protection law.

1. Data controller

The data controller is Gruppo Loma S.r.l., Via Enrico Fermi 4, 80144 Casoria (Naples), Italy, VAT no. 04881070231.
For any request concerning personal data you can write to privacy@gruppoloma.com or call +39 081 736 77 50.

2. Data we process

Browsing data

During normal operation, the computer systems and software that run the Site acquire some data whose transmission is implicit in the use of Internet communication protocols: IP address, browser and device type, date and time of the request, pages visited. These data are used to ensure the Site works correctly and securely, not to identify users.

Data you provide voluntarily

By filling in the contact form you give us your first name, last name, email address, telephone number and the content of your message. By subscribing to the newsletter you give us your email address. Sending emails to the addresses shown on the Site also involves the acquisition of the sender’s address and of the data contained in the message.

Cookies and third-party content

The Site uses technical cookies and, only with your consent, statistics cookies and third-party content that may set cookies. Full details are in the Cookie Policy.

3. Purposes and legal bases

  • Replying to requests sent through the contact form or by email: performance of pre-contractual measures taken at the data subject’s request (Art. 6(1)(b) GDPR).
  • Sending the newsletter with news and updates about Gruppo Loma: the data subject’s consent (Art. 6(1)(a) GDPR), which can be withdrawn at any time.
  • Statistics on the use of the Site through Google Analytics: the data subject’s consent (Art. 6(1)(a) GDPR), given through the cookie banner and withdrawable at any time.
  • Operation, security and maintenance of the Site: the controller’s legitimate interest (Art. 6(1)(f) GDPR).
  • Compliance with legal obligations and, where necessary, protection of the controller’s rights (Art. 6(1)(c) and (f) GDPR).

4. Whether providing data is mandatory

Providing the data marked as mandatory in the forms is necessary for us to follow up on your request: without them we will not be able to reply. Subscribing to the newsletter is optional.

5. How data are processed and how long they are kept

Data are processed by electronic means, with security measures suitable for preventing loss, unlawful use and unauthorised access. They are not subject to automated decision-making or profiling.

  • Contact requests: for the time needed to handle the request and in any case no longer than 24 months from the last contact, unless a contractual relationship follows.
  • Newsletter: until consent is withdrawn or deletion is requested.
  • Browsing data: for the time strictly necessary for technical and security purposes.

6. Recipients of the data

Data may be processed by authorised Gruppo Loma staff and by suppliers acting on its behalf as data processors: the provider of the Site’s hosting and email services and the company that develops and maintains the Site. Data are not disseminated or transferred to third parties for marketing purposes.

The Site also uses some third-party services that receive the visitor’s IP address:

  • Google Fonts (Google Ireland Limited), to display typefaces;
  • Google Maps (Google Ireland Limited), for the map on the Contacts page, loaded only after your consent;
  • Google Analytics (Google Ireland Limited), for aggregate statistics on the use of the Site: statistics cookies are set only after your consent;
  • ipapi.co, used by the contact form to preset the international dialling code based on the country you are connecting from.

7. Transfers of data outside the European Union

The Site is hosted by an Italian hosting provider. Use of the third-party services listed above may involve the transfer of data to countries outside the European Union, in particular the United States; such transfers take place on the basis of the safeguards provided for by the GDPR (adequacy decisions, including the EU-US Data Privacy Framework, or standard contractual clauses).

8. Your rights

At any time you can exercise the rights provided for by Articles 15-22 of the GDPR: access, rectification, erasure, restriction of processing, data portability, objection to processing and withdrawal of consent, without affecting the lawfulness of processing carried out before withdrawal. To exercise them, write to privacy@gruppoloma.com.

You also have the right to lodge a complaint with the Italian Data Protection Authority, the Garante per la protezione dei dati personali (www.garanteprivacy.it).

9. Updates

This notice may be updated: the version in force is always published on this page, with the date of the last update.